Project

General

Profile

Feature #3943

pf - divert-reply not implemented (usefull for haproxy)

Added by Pi Ba over 4 years ago. Updated over 4 years ago.

Status:
New
Priority:
Low
Assignee:
-
Category:
Operating System
Target version:
-
Start date:
10/16/2014
Due date:
% Done:

0%

Estimated time:

Description

Not sure if i should file this under pfsense or packages..
For haproxy it would be beneficial to have support in pf for the divert-reply keyword. So ipfw would not be needed, and side effects like not being able to directly connect to a backend server that is configured to use 'transparent' proxying would no-longer be an issue.

It would help getting transparent proxying to work better. (old haproxy pullrequest that could use divert-reply: https://github.com/pfsense/pfsense-packages/pull/641 )

Patch and python test program that binds to a non-local ip included here: https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=188511

Would be nice if this could be included. Thanks.

(Was thinking about testing and if needed updating the patch for current pfsense version.. However working build instructions are hard to find.. hope the patch is still valid is is.. even if it is not some feedback would be appreciated if it has a chance of getting applied)

kind regards PiBa-NL

History

#1 Updated by Chris Buechler over 4 years ago

  • Affected Version deleted (2.2)

Also available in: Atom PDF